home

setup.x86.en-us_proplusretail_tq39p-7nx7v-739yp-3tx96-cgy3p_tx_pr_.exe

Microsoft Office 2016

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.6925.1018

MD5:
d56455c9f6b06ac7055a4e612791dda9

SHA-1:
9b1d5710ab2cd31ba8242699a982092e91521c26

SHA-256:
210ca82e40dfb96b070e81c937444c9cd0afd4bafb78e1f55ff08dde7da9ac8f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 3:38:21 AM UTC  (today)

File size:
3.3 MB (3,482,312 bytes)

Product version:
16.0.6925.1018

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_proplusretail_tq39p-7nx7v-739yp-3tx96-cgy3p_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 10:42:45 AM

Valid to:
9/4/2016 10:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
6/9/2016 3:31:59 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:fQsLB924DU5jAXELZa/zqk+0SoXM1jYd4qLGPlxLGh6MBC6fmlN1UMMVvKYJNj7i:f7U5jdCqTQfmlSKYJdXHvsPCFwY2sj

Entry address:
0x144E68

Entry point:
E8, DA, 0D, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, 98, 72, 67, 00, F2, 0F, 85, 27, 04, 00, 00, F2, C3, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, AA, 12, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 80, 29, 68, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0...
 
[+]

Entropy:
6.5808

Code size:
1.6 MB (1,715,200 bytes)

The file setup.x86.en-us_proplusretail_tq39p-7nx7v-739yp-3tx96-cgy3p_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=DVQ7Q-8TNR6-RPCKT-H3873-FM6DV

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h4c98e1b1936241bb8c646c7d09461f62&receipt_id=865904298&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235hcca080b096584b8db4104a2e478e378d&receipt_id=845190993&dname=O16.download.name.32

https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=1f73da4d6a8a4c58a9051dc5e55bd65d&re=ud&rid=866067959&culture=en-US&id=ecb34229ad61492983845e281218264b&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=ProPlusRetail&language=en-US&platform=x86&token=M4NKF-JC367-96H8D-W8CRW-XW3K7&TaxRegion=PR&Source=O15PKC&version=O16GA

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=dd15b87ffb6b413baeda767e9dcfcaf5&re=ud&rid=845178848&culture=en-US&id=12aada01000c483c956a48e3b30b8594&dname=O16.download.name.32&source=gmail&ust=1466526109581000&usg=AFQjCNESeM4Qyx2_4CY9EXsos8K8U7Sbgw

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h34ebb1a70e6a4740b1af806684c2afa1&receipt_id=844733045&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=DTNFD-DYVCD-CJQ24-P4WH6-3V697

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16HUP&act=1&language=en-US&token=J2FFN-7JM89-TVG78-92PRM-CWGDV

https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=cbd8aab71ae84cb68c43feb1bd3ac833&re=ud&rid=552720369&culture=en-US&id=2e4208fa2bf4475882e92d8a9185b69f&dname=O16.download.name.32

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=56df24a90f144089862992ed729f5c3d&re=ud&rid=845201247&culture=en-US&id=68c9b72e00a74201bc2f9551dc618986&dname=O16.download.name.32&source=gmail&ust=1467082338833000&usg=AFQjCNHqKT5gOl5Rw1OW0kN5EnYH8oKF4g

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=ProPlusRetail&language=en-US&platform=x86&token=KTBPC-GKNJ8-WXPRW-VDGRX-GJGK2&TaxRegion=PR&Source=O15PKC&version=O16GA

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=c7b9f629f8f143cb86511303d45551a8&re=ud&rid=866064503&culture=en-US&id=bedb13a6845a4567aaf4549c0bf67ca3&dname=O16.download.name.32&source=gmail&ust=1466836423205000&usg=AFQjCNEW868ucR4rsofJmKtEFHgpME1dDA

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234he3f57a04aaa940bab783325296ed5fef&receipt_id=866054556&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h8a575725099f4ca2b803fa0264b9f14f&receipt_id=866059085&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=ProPlusRetail&language=en-US&platform=x86&token=TH2RJ-49N82-MD9PK-W7CD9-XKXX7&TaxRegion=PR&Source=O15PKC&version=O16GA

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=DB&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=XFJVJ-N6Y2K-GRJ7Y-DD7GJ-K2FHH

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hcd5bb131290d44059cfc4bb04726ece2&receipt_id=552709690&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h2dd3e0993015434fb3022e6d7a2e46be&receipt_id=845182740&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=PRR87-NVB4D-8DQK4-QRQ4K-P377H

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hbaab55c88438430d953b49334488ae02&receipt_id=865755733&dname=O16.download.name.32

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=fa7c8581efb34967b1433cd5ea58ac10&re=ud&rid=866028437&culture=en-US&id=c911e50d5e6643ebb19f3dc4f8686b14&dname=O16.download.name.32&source=gmail&ust=1466659430520000&usg=AFQjCNFx1Giy2ZB3LRS6OIvkJxBP8kHH7Q

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=9711659e396a45fd9f93dc608ca7bf53&re=ud&rid=866045553&culture=en-US&id=43262cbffb2d44379d2241ddef29f0e6&dname=O16.download.name.32&source=gmail&ust=1466396491002000&usg=AFQjCNFVK7BjFyRBrMRK6Br4kY0yUViekA

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=ProPlusRetail&language=en-US&platform=x86&token=NX84Y-93HQ2-J7F7P-6XBDG-VCFQP&TaxRegion=PR&Source=O15PKC&version=O16GA

https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=e7f9b0663b3c4790868895e0feb5fc18&re=ud&rid=552706497&culture=en-GB&id=b0b2d542a951494b9260d8faa69bbec2&dname=O16.download.name.32

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=890023052d4a41388442a75e0f94ad47&re=ud&rid=552639617&culture=en-GB&id=7d013fe87f324c96b28e8c2f137d955f&dname=O16.download.name.32&source=gmail&ust=1466163134310000&usg=AFQjCNH3E5AnrxIdyyXZhtChn7wRQ3soFg

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=c8a1aa14fe844f5c995c02affab48ba5&re=ud&rid=845145121&culture=en-US&id=f2266af2b17b4b0c970c0f6ce8a23be0&dname=O16.download.name.32&source=gmail&ust=1466206878777000&usg=AFQjCNEyJbOm9qybfzA6lXDQpEzZ7DmEOg

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=3DNTR-DRK4C-VR2DC-W98FY-HT9X7

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=NQ327-CYJWT-8GHVB-QVRQY-TXXX7

https://www.google.com/url?hl=en&q=https://www.microsofthup.com/.../logon.aspx?cmd=ehup_activate&sid=79925b2f1017427195636d336b010b27&re=ud&rid=845119424&culture=en-US&id=303e3a55051948f4b4f369b592d2448d&dname=O16.download.name.32&source=gmail&ust=1466533539446000&usg=AFQjCNGUqUHCq8rxPdej4FjstDxJVhjNtQ

Latest 30 of 61 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.